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A PROTOCOL FOR CONTROLLING ACCESS TO SCRAMBLED DATA IN 
SPECIFIC TIME RANGES 

The invention relates to a protocol for controlling 
5 access to scrambled data in specific time ranges. 

The transmission of scrambled information is 
currently experiencing unprecedented expansion because of 
the manifest explosion in the provision of services based 
on the transmission of data conveying information of the 

10 most diverse types. 

As a general rule, methods of controlling access to 
scrambled data transmitted in point-to-multipoint mode, 
for example, are based on comparing access criteria 
supplied in access control messages or "entitlement 

15 control messages" (ECMs), against entitlements or access 
rights held by each user and registered in a decoder 
supplied to each user or preferably in an access control 
module, for example a smart card, supplied to each user. 

To be more specific, the information is scrambled at 

20 a sending centre using a service key. The service key is 
contained in a control word. The control word is 
encrypted by means of an operating key, and the 
cryptogram of the. control word is sent to at least one 
descrambling terminal associated with an access control 

25 module provided with a security processor. 

The scrambled information and the periodic access 
control messages, ECM messages, include the cryptogram of 
the control word and the access criteria, with the 
control word and the cryptogram of the control word being 

30 changed periodically. Access to the scrambled 

information at each descrambling terminal is conditional 
upon a "true" value for the access criteria when compared 
with at least one access right registered in the access 
control module, and then upon decryption of the 

35 cryptogram of the control word using the operating key, 
in order to recover the control word and use it 
descramble the scrambled information. 
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For a more detailed description of such access 
control methods reference can usefully be made to the 
provisions of UTE standard C90-007, January 1994. 
At present, with reference to the texts and 
5 provisions of the above-mentioned standard, since there 

are no provisions governing processing, from the point of 
view of access control proper, accessing repeat 
broadcasts of a television program, viewing a recorded 
scrambled program, and accessing the first broadcast of a 
10 program are all equivalent to accessing a first 
broadcast . . 

In particular, it is not at present possible to 
. control specifically, through time ranges, the number of 
viewings, or the number of rewindings in the event of a 
15 recording . 

Consequently, when access control systems are 
further provided with an electronic token-holder 
management system, for managing all aspects of access 
control in terms of account management, for example, any 
20 new viewing or any rewinding, in the case of a recording, 
results either in systematic debiting of the subscriber ' s 
electronic . token-holder , in an access mode known as time- 
based impulsive purchase, or in unlimited access, if. 
access is authorized in all other marketed access modes. 
•25 .An object of the present invention is to remedy the ■ 

drawbacks and limitations of prior art access control 
methods . 

In particular, a more specif ic ' obj ect of the present 
invention is to provide a protocol for controlling access 
30 to scrambled information in specific time ranges of 
adjustable particular durations. 

Another object of the present invention is to 
provide a protocol for controlling access to scrambled 
information in specific time ranges, with it being 
35 possible for the origin of a specific time range to be 

defined with reference to a specific action of each user. 
Given the adjustable nature of the duration of the 
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access time range anci/or of the origin of said access 
time range with reference to a specific action of each 
user, another object of the present invention is to 
implement a plurality of new services associated with the 
5 broadcasting of television programs, such as: a service 
for previewing a broadcast television program for- a 
particular time; a controlled rewind access service after 
recording a broadcast television program; a service for 
■ counting the number of viewings in the event of looped 

10 broadcasting of television programs. 

A further . obj ect of the present invention is to 
implement an access control protocol which, through 
identification of all or part of a program already viewed 
by a subscriber (to which access has therefore already 

15 been granted) , distinguishes any period that has already 
been viewed by the user, and thus optimizes the 
management of viewings based on a criterion of some 
particular number of repeat viewings, or a new viewing as 
the case may be. 

20 In the context of recording television programs, a 

further object of the present invention is to implement 
an access control protocol for limiting the number of 
playbacks, and for limiting the magnitude' of the 
authorized rewind . 

25 . The protocol of the invention for controlling access 

to scrambled information is implemented at a broadcast 
centre. Scrambling is effected using a service key 
contained in a control word. The control word is 
encrypted by means of an operating key, and the access 

30 control protocol consists at least in sending the 
scrambled information and periodic access control 
messages, ECM messages, to at least one descrambling 
terminal associated with an access control module 
provided with a security processor, the ECM messages, 

35 containing access criteria and the cryptogram of the 

control word. The control word and the cryptogram of the 
control word are changed periodically. Access to the 



scrambled information at each descrambling terminal is 
conditional upon, a "true" value for the access criteria 
when compared with at least one access right registered 
in the access control module and then upon decrypting the 
cryptogram of the control word using the .operating key, 
in order to recover • the control word and descramble the 
scrambled information. 

The protocol is remarkable in that it further 
consists in assigning each access control message, ECM 
message, a number satisfying a monbtonic non-decreasing 
function, consecutive messages ECMj with successive 
numbers Tj representing a timebase formed by a plurality 
of individual time intervals for sending successive 
individual quanta of scrambled information. The protocol 
then consists, in each descrambling terminal, in 
detecting the number of each access control message, 
message ECMj , and then, at the request of the user of said 
descrambling terminal for conditional controlled access 
to at least a portion of said scrambled information, in 
selecting an access control number that corresponds to 
the sending time of said request, and in constituting a 
time origin of said timebase. 

Access by the user to the scrambled information is 
authorized as a function of a specific access criterion 
from said origin of the timebase over a time range 
corresponding to a plurality of individual time intervals 
defining a plurality of successive individual quanta of 
scrambled information. 

The access control protocol of the present invention 
is particularly suitable for point-to-multipoint 
transmission of scrambled information, in particular 
television programs ," and managing pay TV services " in 
general. 

The protocol will be better understood on reading 
the following description and examining the appended 
drawings, in which: 

• Figure la is, by way of purely illustrative 



example, a general flowchart for implementing the 
protocol of the present invention; 

• Figure lb comprises different timing diagrams 
illustrative of time ranges constituting a backward 
interval, a- forward interval, . and a - forward-backward 
interval,, respectively; 

• Figu re^ l c represents, by way of purely 
illustrative example, different embodiments of a 
monotonic non-decreasing function; 

• Figure 2 is, by way of purely illustrative 
example, a flowchart of a specific implementation of the 
protocol of the present invention, more particularly 
suited for managing services such as a previewing service 
for a scrambled broadcast TV program, a rewind service, 

.and a service for managing numbers of viewings in the 
event of looped broadcasting. 

A more detailed description of the protocol of the 
present invention for controlling access to scrambled 
information is given below with reference to Figure la 
and the subsequent figures. 

Generally speaking, the protocol that is the subject 
matter of the present invention is implemented firstly at 
a transmission centre CE and secondly at a. plurality of 
descrambling terminals D k , each associated with an access 
control module constituted by a dedicated smart card 
including a security processor, for example. 

The information I is scrambled at the transmission 
centre CE using a service key contained in a control word 
CW that is encrypted by means of operating key in a 
manner that is known in the art. 

The scrambled information I* is transmitted with 
periodic access control messages, known as ECM messages. 
The messages contain access criteria. The cryptogram of 
the control word CW, and in particular the control word, 
are changed periodically. Access to the scrambled 
information at each descrambling terminal D k is 
conditional upon the access criteria conveyed by the 
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access control messages ECM giving a "true" value when 
compared with at lest one access right registered in the 
access control module associated with each descrambling 
terminal D k . 

5 The cryptogram of the control word is decrypted at 

' each descrambling terminal, and in particular in the 
access control module, using the operating key, in order 
to recover the control word CW and descramble the 
scrambled information I*. 
10 According to a remarkable aspect of the protocol of 

the present invention for controlling access to scrambled 
information, the protocol further consists in, the 
transmission centre CE in particular, assigning each 
access control message, ECM message, a number Tj 
15 satisfying a monotonic non-decreasing function, for which 
reason the access control messages are denoted ECMj, where 
2 designates the rank of the above-mentioned number. 

According to a particularly remarkable aspect of the 
protocol of the present invention, the consecutive 
20 control messages ECMj with successive numbers Tj represent 
a timebase formed by a plurality of individual time 
intervals for transmitting successive individual quanta 
of scrambled information. It will thus be understood 
that between two successive numbers, for example the 
25 numbers Tj-i, Tj, corresponding to at least one time 

interval 8 representative of the sending times of the 
control messages ECMj , an individual quantum of scrambled 
information denoted 8l* (j -i, is sent to each descrambling 
terminal D k . 

30 At each of the above-mentioned descrambling 

terminals D k , the protocol of the present invention then 
consists in a step B of detecting the number Tj of each 
access control message ECMj . The operation of detecting 
the number of each access control message is accompanied 

35 by storing the current number. 

According to another particularly remarkable aspect 
of the protocol of the present invention, the invention 
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consists, at the request of the user of the descrambling 
terminal D k concerned for conditional access to at least a 
portion of the scrambled information, in selecting, in a 
step C, a number for an access control message ECMj , which 
number corresponds to the sending time of the user 
request UR. 

Clearly, since the user sends a user request UR over 
the descrambling terminal (the request may be sent from a 
program selector such as a remote controller, for 
example, or by any other means) , the sending time of the 
request is identified relative to the current number Tj 
detected in the preceding step B, and in particular 
relative to an earlier event, such as a previous access, 
as is explained below. The earlier event may correspond 
15 to a previous access defining the origin of the timebase 

whose number is T jo . 

In particular, the number T jo constituting the 
origin time of the timebase, and which is obtained in the 
step A, may advantageously correspond to the number of 
20 the message ECM jo of the most recent previous non-free 

controlled access stored in the access control module or 
the card issued to the user, as is explained below. 

In Figure la, there is symbolically represented in 
the step C the series of successive numbers Tj-i, Tj, T j+ i 
25 and a user request UR, the number T jo for the origin of 
the timebase being deemed to be less than (i.e. earlier 
than) the successive numbers of the sequence Tj-i, Tj, T j+ i . 
In any event, it is clear that the number T jo for a 
previous access may nevertheless be greater than the 
30 current number Tj identifying the sending of the user 
request UR by the user. 

This is the case when accessing programs broadcast 
in a loop with the same access control parameters ECMj or 
when accessing recorded programs, for example. 
35 step C of selecting the access control message 

number may then be followed by a step D of authorizing 
access by the user to the scrambled information as a 
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function of a specific access criterion, starting from 
the origin T jo of the timebase and over a time range 
corresponding to -a plurality of individual time intervals 
defining a plurality of successive individual quanta of 
scrambled information. 

For this reason, in Figure la, A (T jo , td, tf) 
represents the access time range assigned to the user, 
where: 

. jo represents the rank of the number T jo defining 
the origin of the timebase; 

• td represents an offset of the numbers in the 
timebase relative to the above-mentioned origin T jo ; and 

• tf represents another offset of the numbers 
relative to the above-mentioned origin T jo . 

By way of a non-limiting example, the above- 
mentioned offsets can correspond to at least one 
individual time interval 8 taken to be equal to the 
sending time of the access control message ECMj . 

In this case, each successive individual time 
interval at the time j of receiving the message ECMj is 
denoted 8(j) and the corresponding individual quantum of 
information is denoted: 

8l* (j ) = 5(j, (I*) 

It can thus be understood that, by means of the user 
request UR as formulated, the user is authorized to 
access the information AI* = A(T j0 , td, tf) (I*) over a 
plurality of individual time intervals 8 (j) in the final 
step E in Figure 1 for successive quanta of information 
81* (j ) over the time range AI* = A(T jo , td, tf ) . 

The purpose, of Figure lb is to illustrate parameters 
for defining the current access number corresponding to 
the user request, and previous user access numbers stored 
in the card in order to constitute the origin T jo of the 
corresponding timebase, and for a start time td, and an 
end time tf relative to the origin T jo of the timebase; 
the parameters T ]0 , td, and tf therefore define the time 
range for access authorized in accordance with the 
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specific access criteria, as mentioned above. 

Line 1 in Figure lb represents the succession of 
numbers for received messages ECMj , where ± designates the 
rank of the current number for the corresponding message 
ECMj . 

in relation to lines 2, 3 and 4 in Figure lb: 

• the origin T jo of the timebase is the most recent 
access stored in the user's card, for example the most 
recent non-free of charge access, to the program of 
scrambled information I* concerned; 

• td is the offset relative to the origin T jo 
corresponding to the start of the time region, or time 
range, to which access is authorized on the basis of. a 
specific access criterion; and 

• tf is the offset relative to the origin T jo 
corresponding to the end of the time region, or time 
range, to which access is authorized in accordance with 
the specific access criterion. 

With reference to lines 2, 3 and 4 in Figure lb: 

• the time range, or interval, is backward for 

td < 0 and tf < 0; 

• the interval, or time range, is forward for td > 0 

and tf > 0; 

• the time range, or interval, is a "straddling" 
time range, i.e. forward and backward, for td < 0 and 
tf > 0. 

Specifically, although this is not limiting on the 
invention, the current number of a message ECMj is always 
non-decreasing during the transmission of a broadcast 
program. However, if the program is broadcast in a loop, 
or if it corresponds to a program recorded on a recorder 
and played back, the value T j0 stored in the card assigned 
to the subscriber may correspond to a previous access and 
be relative to the time interval, or time range, defined 
by T jo , td, and tf, as represented in lines 2, 3, and 4 in 
Figure lb. Use of the protocol of the present invention 
is beneficial in these three situations. 
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Different implementations of a number Tj satisfying 
a monotonic non-decreasing function are described below 
with reference to Figure lc. 

Line 1 of Figure lc represents a monotonic non- 
decreasing function in the form of a continuously 
increasing function of the sending time for control 
messages ECMj . For example, each number Tj is constant 
over the individual time period 8 (j) and satisfies the 
condition: 

Tj.! < Tj < T D+1 

Line 2 in Figure lc represents a monotonic non- 
decreasing function in the form of a stepped increasing 
function of the sending time for control messages ECMj. 

With particular reference to line 2 in this figure, 
it is clear that each control message ECMj may be repeated 
over one or more individual time intervals between the 
successive numbers Tj-!, Tj et seq. This mode of operation 
defines a timebase with a resolution other than the 
sending time for control messages ECMj. 

As also represented in the same line 2, each number 
Tj may be defined by a timestamp. In the example given in 
Figure 2, the timestamp is a time value expressed in 
seconds. Each step Tj-i, Tj et seq. is then defined by the 
time range represented by the two different timestamps, 
for example. 

An object of the protocol of the present invention 
is to manage the number of viewings NV of the same 
program broadcast and/or recorded by a user, where each 
viewing may comprise access to the same program one or 
more times, access at two or more separate times being 
included the same viewing and, in this situation, since 
the number of viewings is unchanged, no additional amount 
is billed to the user in this kind of situation. 

The change, however, from one access to another by 
the user in the same program under conditions other than 
the specific access above-mentioned criterion counts as 
two different viewings, one "viewing" and one "other 
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viewing", the other viewing leading to incrementing the 
number of viewings and to an additional amount being 
billed to the user, as described below. 

Referring to Figure 2, managing the number of 
5 viewings NV of programs at the request of the user and 
according to the specific access criterion in the above- 
defined time range and outside that time range, the 
access criterion may, as represented in Figure 2, consist 
in a step E 0 of defining a maximum authorized number of 
10 viewings NVM of the scrambled broadcast program 

containing the scrambled information I*. The protocol of 
the invention may further define a first Boolean variable 
AV whose "true" value represents authorization for 
forward access to the scrambled information I* beyond the 
15 origin and outside the above-defined time range without 
incrementing the number of viewings, with such access to 
the information beyond the origin and outside the time 
range being authorized on the basis of an access 
criterion separate from the specific access criterion 
20 defining access in the above-mentioned time range. 

The protocol may also define a second Boolean 
variable AR whose "true" value is representative of 
authorization for backward access to the scrambled 
information before the origin and outside the time range 
25 on the basis of an access criterion different from the 
above-mentioned specific access criterion and without 
incrementing the number of viewings. 

In a preferred embodiment of the protocol of the 
present invention, the access criterion specific to the 
30 above-defined access time range or region, in particular 
as defined by the offset parameters td and tf relative 
the origin T jo of the timebase, may advantageously allow 
the user free access, i.e. unbilled access, in that 
range . 

35 By way of purely illustrative example, it is 

specified that the Boolean variables AV and AR referred 
to above have the value 1 for the "true" value and the 
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value 0 for the "false" value. 

In the step E 0 in Figure 2, on the user sending the 
user request UR defined by the rank ± of the number T-j of 
the corresponding access control message ECM-j, there are 
available: 

• variables NV, T jo if a previous access has been 
made to the same scrambled data program, T jo representing 
the stored value serving as the origin for the next 
access resulting from the request UR, and NV designating 
the number of viewings already effected; 

• the authorized maximum number of viewings NVM; 

• the Boolean variables AV and AR; and 
■ the time range A(T j0 , td, tf) . 

Finally, to implement the protocol of the present 
invention, it may be advantageous to initialize the 
number of viewings NV to zero if the user has made no 
accesses and thus has not viewed any corresponding 
scrambled data program. 

In this case, and as represented in Figure 2, the 
protocol of the invention may test for the existence of 
the variable NV in the step El This test is denoted: 

3(NV) ? 

In the event of a negative result of the test E x , 
i.e. if. there is a variable NV equal to 0 for the 
scrambled information I* concerned, then a step E 2 is 
executed which tests whether the number of viewings NV is 
less than the maximum number of viewings NVM. 

It is clear, of course, that in this starting 
situation the result of the test E 2 is generally always 
positive, since the number of viewings NV is equal to 0 
in this situation. 

In the event of a positive result of the test E 2 , a 
step E 4 is executed which increments the value of the 
number of viewings by 1, in accordance with the following 
equation: 

NV = NV + 1 . 

Clearly, in this case, the access to the scrambled 
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information program I* is the first access. 

In this case, the step E 4 may then be followed by a 
step E 5 which, for the first viewing, updates the origin 
of the timebase, i.e. the value T jo , to the value T 3 which 
5 is none other than the reception number for the user 
reguest UR, i.e. the reception number for the 
corresponding message ECMj . 

The step E 5 of updating the origin of the timebase 
may then be followed by access to the individual quantum 
10 of information 8l*< 3 , in a step E 6 . Clearly, in this case, 
the first access corresponds to a first viewing and the 
access criterion applied is an access criterion different 
from the specific access criterion corresponding to free 
access . 

15 But, in the event of a positive result of the above- 

mentioned test Ei, because the value of NV is not equal to 
0, there are at least one earlier access and at least one 

earlier viewing. 

In this case, the step Ei is followed by a step E 7 
20 of testing whether the number of viewings NV is less than 
or egual to the authorized maximum number of viewings 
NVM . 

In the event of a negative result from the test E 7 , 
access to the scrambled information is refused in the 
25 step E 8 because the user has clearly exceeded the viewing 
quota NVM. 

However, if the result of the test E 7 is positive, 
the protocol of the invention then tests, in step E 8 , 
whether the current number Tj lies within the time range 
30 The step E 8 test of whether the current number T 

in the time range, satisfies the condition: 
(T jo + td) < Tj < (T jo + tf) 

In the event of a positive result from test E 8 , 
access to the individual- quantum of scrambled information 
35 51* (j) is authorized, in the above-described step E 6 , on 

the basis of the specific access criterion and during the 
scrambled information time range. 



j is 
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It is clear, of course, that access during the time 
range consists in particular in authorizing successive 
access to each quantum of information covering the time 
range, as mentioned above. 

It is equally clear that, if the specific access 
criterion corresponds to a free access criterion, i.e. 
when there is nothing to be billed to the user, access is 
effected directly, in step E 6 , without incrementing the 
number of viewings NV. 

However, if the result of the test E 8 is negative, 
access to the scrambled information is authorized on the 
basis of an access criterion different from the specific 
access criterion, and is conditional upon the above- 
mentioned Boolean variables having the "true" value. 

Clearly, given the values of the above-mentioned 
Boolean variables, it is possible to determine whether 
any new access, upstream or downstream of the above- 
mentioned origin, contributes or does not contribute to a 

new viewing. 

Accordingly, if the current number Tj does not 
belong to the above-mentioned time range, i.e. in the 
event of a negative result from test E 8 , authorization of 
access on the basis of an access criterion different from 
the specific access criterion and conditional on a "true- 
value of a Boolean variables may consist, in a step E 9 and 
as represented in Figure 2 , in submitting the current 
number Tj representative of the sending time of the user 
request UR and the first Boolean variable AV to a first 
logic test to verify whether the current number Tj is 
greater than or equal to the number T jo for the origin and 
to verify that the first Boolean variable AV has the 
"true" value for authorizing forward access to the 
scrambled information. 

The test E 9 also submits the current number Tj and 
the second Boolean variable AR to a second logic test to 
verify whether the above-mentioned current number Tj is 
less than or equal to the number T jo for the origin and to 
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verify whether the second Boolean variable AR has the 
"true" value for authorizing backward access to the 
scrambled information. 

In the test E 9 in Figure 2, the first and second 
logic tests satisfy the condition: 

(Tj > T jo AND AV = 1) OR (Tj < T j0 AND AR = 1) 
In the event of a positive result from test E 9 , i 
in the event of a positive result of either of the above- 
mentioned first and second logic tests, then forward 
access, or backward access as the case may be, is 
authorized without incrementing the number of viewings of 
the scrambled information. 

Clearly, for any user request UR corresponding to a 
reception number Tj outside the time range defined in the 
15 step E 8 and greater than the number T jo at the origin, the 
-true" value of the Boolean variable AV, indicating a 
forward request, i.e. continued viewing, indicates that 
the user wishes to resume the earlier viewing. This may 
be effected by the user to the detriment of the non- 
20 viewing of all the quanta of scrambled information from 
T jo to Tj. 

The same applies to the second logical test, where 
the current number Tj is this time lower than the origin 
number T jo . This may be the case, for example, either on 
25 returning to a program broadcast in a loop, or on 

rewinding a recording on a recorder. In the same way, in 
this kind of situation, the user wishes to view an 
earlier episode which may or may not have been accessed 
previously. 

Authorization of forward access (or backward access 
as the case may be) without incrementing the number of 
viewings, following a positive result from test E 9 , 
entails executing the step of updating the origin number 
T jo , which is updated to the value Tj, in step E 5 . Step E 5 
is then followed. by step E 6 which accesses the individual 
quantum of scrambled information 81* (j>. 

Otherwise if the result from test E 9 is negative, 
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since neither the first nor the second logical test is 
satisfied, the protocol of the invention tests in step E 2 
whether the number of viewings NV is less than the 
authorized maximum number of viewings NVM. 

In the event of a negative result of above-mentioned 
test E 2 , access to the individual quantum of scrambled 
information Sl* (j) is refused in step E 3 , the user having 
exhausted the quota of viewings for the program 
concerned. Otherwise, in the event of a positive result 
from test E 2 , the number of viewings NV is incremented by 
1, in above-mentioned step E«, said step E 4 being followed 
by authorization of forward access (or backward access as 
the case may be), to the scrambled information via above- 
mentioned updating step E 5 . 
15 it is therefore clear that, because of the 

incrementation in the step E 4 , i.e. the user has chosen an 
access constituting a new viewing, the new viewing will 
be billed as such, the new access constituting a new 
viewing . 

20 An embodiment of the protocol of the present 

invention for a service corresponding to a single 
rewinding of a recording on a device such as a recorder 
is described below with reference to Figure 2. 

By way of non-limiting example, in this situation, 

25 the maximum number of viewings NVM may be taken as equal 
to 1, for example, and the time- interval or the time 
range for which access is authorized in accordance with 
the specific access criterion, and in particular in 
accordance with free access, is defined by the following 

30 parameters: 

• td < 0 

• tf = 0. 

In this kind of application to the above-mentioned 
service, the Boolean variables are respectively forced as 
35 follows: 

• AV = 1 

• AR = 0. 
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Clearly, in this case, the user is assigned a 
maximum viewing time by rewinding, as defined above. 
Outside this interval, only forward viewing from the 
position T jo is authorized, because of the "true" or 
"false" values of the above-mentioned Boolean variables. 

A second embodiment of the protocol of the present 
invention is described below with reference to the same 
Figure 2 in an application to a preview service. 

The preview service in fact corresponds to free 
forward access authorizations relative to the origin of 
the timebase . 

In a situation of this kind, the maximum number of 
viewings may be taken as equal to 1, for example: NVM = 
1. This example is not limiting on the invention. 

The access time area according to the specific 
access criterion, such as the above-mentioned free access 
criterion, is then defined by: 
td = 0 
tf > o. 

In this case, for the preview service, the Boolean 
variables for the recorder forward and reverse control 
functions may be taken as equal to AV = 0 and AR = 0 , 
respectively. In this case, in the context of the 
preview service, the user is authorized to view only in 
the above-mentioned time interval or time range a number 
of successive quanta of .scrambled information determined 
by the magnitude |tf - td| determined in a specific 
manner. It is recalled that the magnitude of the above- 
mentioned time range may correspond to three minutes of 
viewing, for example. 

A third embodiment of the protocol of the present 
invention is described below with reference to the same 
Figure 2, in an application to controlling the number of 
viewings during the broadcasting of a program in a loop, 
for example. 

In this application, the maximum number of viewings 
NVM for the scrambled information program concerned may 
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be defined arbitrarily. 

By way of non-limiting example, the magnitude of the 
time region for which access is authorized in accordance 
with the specific access criterion, i.e. free access, may 
5 be arbitrarily set at 0: td = 0 AND tf = 0. 

In this case, it is clear that the user is 
authorized to consult any scrambled information program 
broadcast in looped mode in accordance with an access 
criterion different from the specific access criterion 
10 and corresponding to at least one of the access rights 
registered in the user's card being satisfied. 

In this situation, only basic forward access is 
authorized,, i.e. access to- successive quanta of scrambled 
information, the Boolean variables taking the values: 
15 • AV = 1 

• AR = 0 . 



